🔒 SECURITY: Add owner authorization check for moderation/group management skills

Fix critical security vulnerability where any user could execute
moderation and group management actions (kick, ban, mute, leave group,
change group settings, etc.) by simply asking the bot.

Changes:
- modules/config.py: Add OWNER_ID, RESTRICTED_SKILLS, and is_owner()
function to verify that only Isaac (ID: 202391978787009) can execute
restricted skills
- modules/api.py: Add authorization check in _execute_agent_loop before
executing any restricted skill, blocking non-owner users
- modules/skills_registry.py: Add defense-in-depth authorization check
in SkillRegistry.execute() to protect against bypass attempts

Restricted skills include: moderation, group_management, group_control,
delete_message, set_bot_profile, configure_moderation,
manage_moderation_exceptions, manage_blacklist, manage_warnings,
configure_welcome_goodbye, broadcast_message, reset_conversation_memory

Also includes pre-existing OpenRouter rotation improvements.

modules/api.py

@@ -595,20 +595,52 @@ class LLMManager:
         logger.info("🔧 [INIT] Together OK")
 
     def _setup_openrouter(self):
-        api_key = getattr(self.config, 'OPENROUTER_API_KEY', '')
-        if api_key and len(api_key) > 5:
-            try:
-                import openai
-                import httpx
-                self.openrouter_client = openai.OpenAI(
-                    base_url="https://openrouter.ai/api/v1",
-                    api_key=api_key,
-                    timeout=httpx.Timeout(30.0, connect=8.0),
-                    max_retries=0,
-                )
-                logger.info("OpenRouter OK")
-            except Exception as e:
-                logger.warning(f"OpenRouter falhou: {e}")
+        try:
+            rotation = get_openrouter_rotation()
+            current_key = rotation.get_current_key()
+            current_name = rotation.get_current_account_name()
+
+            if not current_key:
+                # Fallback: usar OPENROUTER_API_KEY (single key)
+                current_key = getattr(self.config, 'OPENROUTER_API_KEY', '')
+                current_name = "default"
+
+            if current_key and len(current_key) > 5:
+                try:
+                    import openai
+                    import httpx
+                    self.openrouter_client = openai.OpenAI(
+                        base_url="https://openrouter.ai/api/v1",
+                        api_key=current_key,
+                        timeout=httpx.Timeout(30.0, connect=8.0),
+                        max_retries=0,
+                    )
+                    logger.info(f"✅ OpenRouter OK (conta: {current_name})")
+                except Exception as e:
+                    logger.warning(f"OpenRouter falhou: {e}")
+                    self.openrouter_client = None
+            else:
+                logger.warning("⚠️ OpenRouter: Nenhuma chave API válida configurada")
+                self.openrouter_client = None
+        except Exception as e:
+            logger.warning(f"OpenRouter rotation falhou: {e}")
+            # Fallback: tentar OPENROUTER_API_KEY diretamente
+            api_key = getattr(self.config, 'OPENROUTER_API_KEY', '')
+            if api_key and len(api_key) > 5:
+                try:
+                    import openai
+                    import httpx
+                    self.openrouter_client = openai.OpenAI(
+                        base_url="https://openrouter.ai/api/v1",
+                        api_key=api_key,
+                        timeout=httpx.Timeout(30.0, connect=8.0),
+                        max_retries=0,
+                    )
+                    logger.info("OpenRouter OK (fallback single key)")
+                except Exception as e2:
+                    logger.warning(f"OpenRouter falhou: {e2}")
+                    self.openrouter_client = None
+            else:
                 self.openrouter_client = None
 
     def _setup_torouter(self):
@@ -1163,8 +1195,11 @@ class LLMManager:
         try:
             rotation = get_openrouter_rotation()
             current_name = rotation.get_current_account_name()
+            current_key = rotation.get_current_key()
             if current_name:
                 openrouter_account_label = current_name
+            if current_key:
+                self.openrouter_client.api_key = current_key
         except Exception:
             pass
 
@@ -1190,7 +1225,7 @@ class LLMManager:
             messages.append(msg)
         messages.append({"role": "user", "content": user_prompt or ""})
 
-        model_name = getattr(self.config, 'OPENROUTER_MODEL', 'tencent/hy3-preview:free')
+        model_name = getattr(self.config, 'OPENROUTER_MODEL', 'deepseek/deepseek-chat')
 
         try:
             resp = self.openrouter_client.chat.completions.create(
@@ -1260,8 +1295,39 @@ class LLMManager:
                 status_match = None
 
             if status_match == 429 or "429" in err_str or "Too Many Requests" in err_str or "free-models-per-day" in err_str:
-                self.__class__._openrouter_circuit_open_until = _time.time() + self.__class__._OPENROUTER_CIRCUIT_TIMEOUT
-                logger.warning(f"⚡ [OR-CIRCUIT] 429 detectado na conta {openrouter_account_label} → OpenRouter bloqueado por {int(self.__class__._OPENROUTER_CIRCUIT_TIMEOUT//60)} min")
+                # ✅ [OR-ROTATION] Tentar rotacionar para próxima conta em vez de bloquear tudo
+                retry_succeeded = False
+                try:
+                    rotation = get_openrouter_rotation()
+                    next_key = rotation.rotate_on_429()
+                    if next_key:
+                        self.openrouter_client.api_key = next_key
+                        new_account = rotation.get_current_account_name()
+                        logger.info(f"🔄 [OR-ROTATION] Rotacionado para conta: {new_account}. Tentando novamente...")
+                        try:
+                            resp = self.openrouter_client.chat.completions.create(
+                                model=model_name,
+                                messages=messages,
+                                temperature=0.7,
+                                max_tokens=max_tokens
+                            )
+                            if resp and hasattr(resp, 'choices') and resp.choices:
+                                choice = resp.choices[0]
+                                if hasattr(choice.message, 'content') and choice.message.content:
+                                    text = choice.message.content
+                                    if text and isinstance(text, str) and text.strip():
+                                        logger.info(f"✅ [OR-ROTATION] Sucesso na conta: {new_account}")
+                                        return text.strip()
+                        except Exception as retry_err:
+                            logger.warning(f"⚠️ [OR-ROTATION] Retry falhou na conta {new_account}: {retry_err}")
+                    else:
+                        logger.warning("⚠️ [OR-ROTATION] Todas as contas OpenRouter esgotadas. Nenhuma chave disponível.")
+                except Exception as rot_err:
+                    logger.debug(f"⚠️ OpenRouter rotation falhou: {rot_err}")
+
+                if not retry_succeeded:
+                    self.__class__._openrouter_circuit_open_until = _time.time() + self.__class__._OPENROUTER_CIRCUIT_TIMEOUT
+                    logger.warning(f"⚡ [OR-CIRCUIT] 429 detectado na conta {openrouter_account_label} → OpenRouter bloqueado por {int(self.__class__._OPENROUTER_CIRCUIT_TIMEOUT//60)} min")
                 return None
             elif status_match == 401 or "401" in err_str or "Unauthorized" in err_str:
                 logger.error("OpenRouter: Erro de autenticação (401). Pulando.")
@@ -4641,15 +4707,25 @@ class AkiraAPI:
                         }
                     })
                     
-                    # Executa a skill (com injeção de contexto)
-                    observation = registry.execute(
-                        tc.name, 
-                        args, 
-                        analise_visao=analise_visao,
-                        analise_doc=analise_doc,
-                        conversation_id=conversation_id,
-                        user_id=numero
-                    )
+                    # 🔒 SECURITY: Authorization check for restricted skills
+                    # Only the owner (Isaac, ID: 202391978787009) can execute
+                    # moderation/group management actions
+                    if tc.name in config.RESTRICTED_SKILLS and not config.is_owner(numero):
+                        self.logger.warning(
+                            f"🔒 [SECURITY] Usuário {numero} (não-proprietário) "
+                            f"tentou executar skill restrita: {tc.name}. Bloqueado."
+                        )
+                        observation = "Não autorizado. Apenas o dono pode executar este comando."
+                    else:
+                        # Executa a skill (com injeção de contexto)
+                        observation = registry.execute(
+                            tc.name, 
+                            args, 
+                            analise_visao=analise_visao,
+                            analise_doc=analise_doc,
+                            conversation_id=conversation_id,
+                            user_id=numero
+                        )
                     
                     # 🔍 DEBUG EXTREMO: Log completo da observation
                     self.logger.info(f"🔍 [SKILL RESULT] {tc.name} = {type(observation).__name__}")

modules/config.py

@@ -1013,6 +1013,27 @@ PRIVILEGED_USERS: Tuple[str, ...] = (
     "202391978787009",   # Added for full recognition
 )
 
+# ============================================================
+# 🔒 OWNER ID - Apenas este usuário pode executar ações críticas
+# ============================================================
+OWNER_ID: str = "202391978787009"
+
+# Habilidades restritas: apenas o proprietário (OWNER_ID) pode executar
+RESTRICTED_SKILLS: Tuple[str, ...] = (
+    "moderation",                    # kick, ban, mute, clear
+    "group_management",              # get_invite_link, get_admins, get_members, etc.
+    "group_control",                 # open, close, lock_settings, unlock_settings
+    "delete_message",                # delete messages
+    "set_bot_profile",               # change bot name/about
+    "configure_moderation",          # configure protections (antilink, antispam, etc.)
+    "manage_moderation_exceptions",  # manage exemptions
+    "manage_blacklist",              # manage blacklist
+    "manage_warnings",               # apply/remove warnings
+    "configure_welcome_goodbye",     # configure welcome/goodbye
+    "broadcast_message",             # broadcast to all members
+    "reset_conversation_memory",     # reset conversation memory
+)
+
 # ============================================================
 # 🎯 PROMPT DO SISTEMA (INJEÇÃO GARANTIDA EM TODOS OS PROVEDORES)
 # ============================================================
@@ -1309,6 +1330,25 @@ def is_privileged(usuario_id: str) -> bool:
     logger.debug(f"Usuário não privilegiado: {usuario_id}")
     return False
 
+def is_owner(usuario_id: str) -> bool:
+    """
+    Verifica se o usuário é o proprietário (OWNER_ID).
+    
+    Apenas o proprietário pode executar habilidades restritas
+    (moderação, gerenciamento de grupo, etc.).
+    
+    Args:
+        usuario_id: ID do usuário (número de telefone ou nome)
+        
+    Returns:
+        True se o usuário for o proprietário
+    """
+    if not usuario_id:
+        return False
+    
+    numero_limpo = re.sub(r'[^\d]', '', str(usuario_id))
+    return numero_limpo == OWNER_ID
+
 def verificar_privilegios_detalhado(usuario_id: str) -> Dict[str, Any]:
     """
     Verificação detalhada de privilégios com nível e permissões.
@@ -2584,6 +2624,9 @@ __all__: List[str] = [
     "PRIVILEGED_COMMAND_PREFIXES",
     "is_privileged",
     "is_privileged_command",
+    "OWNER_ID",
+    "RESTRICTED_SKILLS",
+    "is_owner",
     
     # API Status
     "API_AVAILABLE",

modules/skills_registry.py

@@ -61,10 +61,28 @@ class SkillRegistry:
         
         ✅ NOVO: Handler especial para media (images_data, video_url, audio_url)
         Evita error "Object of type bytes is not JSON serializable"
+        
+        🔒 SECURITY: Authorization check for restricted skills (defense-in-depth)
+        Only the owner can execute moderation/group management skills.
         """
         if name not in self.skills:
             return f"Erro: Skill '{name}' não encontrada."
         
+        # 🔒 SECURITY: Defense-in-depth authorization check
+        # This is a backup check in case _execute_agent_loop is bypassed
+        user_id = kwargs.get("user_id")
+        if user_id:
+            try:
+                from .config import RESTRICTED_SKILLS, is_owner
+                if name in RESTRICTED_SKILLS and not is_owner(user_id):
+                    logger.warning(
+                        f"🔒 [SECURITY] Usuário {user_id} (não-proprietário) "
+                        f"tentou executar skill restrita: {name}. Bloqueado no registry."
+                    )
+                    return "Não autorizado. Apenas o dono pode executar este comando."
+            except Exception:
+                pass
+        
         try:
             logger.info(f"🚀 Executando Skill: {name} com args: {args}")
             handler = self.skills[name]["handler"]